Last updated 1 week ago
In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. The breach initially appeared to be misattributed to CAF (the French family allowance fund) but was later confirmed to affect the Pass'Sport program. The dataset contained 6.5 million unique email addresses affecting approximately 3.5 million households. Compromised data included names, phone numbers, genders, and physical addresses. The Ministry of Sports subsequently acknowledged the incident with a public statement.
Data posted to a hacking forum
The breach highlights potential weaknesses in data protection controls for government programs handling sensitive citizen information. Recommendations include implementing stronger access controls, regular security audits of databases containing personal data, and improved incident response protocols for timely detection and notification when data is exposed.
Company
Industry
Location
Disclosed
Records Affected
Attack Vector